Changes the password of a user if the reset token is valid. The send_password_reset_email endpoint sends an email to the user containing the token. That token can be used to change the password here without providing the old password.