add api method to change password using JWT

There is a way to check the change password using JWT but not to do the
actual change.

Author: mgrunberg

src/main/api/changePasswordJWT.json

@@ -0,0 +1,33 @@
+{
+  "uri": "/api/user/change-password",
+  "comments": [
+    "Changes a user's password using their access token (JWT) instead of the changePasswordId",
+    "A common use case for this method will be if you want to allow the user to change their own password.",
+    "",
+    "Remember to send refreshToken in the request body if you want to get a new refresh token when login using the returned oneTimePassword."
+  ],
+    "method": "post",
+  "methodName": "changePasswordByJWT",
+  "successResponse": "ChangePasswordResponse",
+  "errorResponse": "Errors",
+  "anonymous": true,
+  "authorization": "\"Bearer \" + encodedJWT",
+  "params": [
+    {
+      "name": "encodedJWT",
+      "comments": [
+        "The encoded JWT (access token)."
+      ],
+      "type": "notUsed",
+      "javaType": "String"
+    },
+    {
+      "name": "request",
+      "comments": [
+        "The change password request that contains all the information used to change the password."
+      ],
+      "type": "body",
+      "javaType": "ChangePasswordRequest"
+    }
+  ]
+}