:::endpoint POST /v1/me/password

Changes the password you sign in with, everywhere. Every other device and
browser is signed out at once; the device that asked stays signed in.

## Request

```bash
curl -X POST https://api.proppertrading.com/v1/me/password \
  -H "Authorization: Bearer ptat_9f2c1a44_3b8e7d2f5c9a1b4e6d8f0a2c4e6b8d1f" \
  -H "Content-Type: application/json" \
  -H "Idempotency-Key: 6a2d9c1e-3f5b-4a7d-9e1c-2b4d6f8a0c3e" \
  -d '{"current_password": "the-old-one", "password": "a-much-better-one"}'
```

| Field              | Type   | Description |
| ------------------ | ------ | ----------- |
| `current_password` | string | The password as it is now |
| `password`         | string | The new one. The same rules as on the website |

## Response

`204`, with no body.

## Errors

| Status | Code                       | Meaning                                      |
| ------ | -------------------------- | -------------------------------------------- |
| 400    | `invalid_current_password` | `current_password` is not the password       |
| 403    | `insufficient_scope`       | This device does not hold `me:write`         |
| 422    | `validation_failed`        | The new password does not meet the rules     |
| 429    | `rate_limit_exceeded`      | Six a minute                                 |

:::warning Other devices are signed out
Their next request answers `401 revoked_token`. That includes the person's
other phones, so say so before they confirm.
:::