How should the user change it's password?

Finally understood, I just call the API to send an email.