- Validates old password and updates to new one using UserManager - Secured the endpoint for authenticated users only