static apiUpdateUserPassword (req, res) {
    if (!ArkimeUtil.isString(req.body.newPassword, 3)) {
      return res.serverError(403, 'New password needs to be at least 3 characters');
    }

    if (!req.user.hasRole('usersAdmin') && (Auth.store2ha1(req.user.passStore) !==
      Auth.store2ha1(Auth.pass2store(req.token.userId, req.body.currentPassword)) ||
      req.token.userId !== req.user.userId)) {
      return res.serverError(403, 'Password mismatch');
    }

    // Skip this check if we are a superAdmin
    if (!req.user.hasRole('superAdmin')) {
      // Only change the password if we have the same admin roles(s)
      for (const role of adminRolesWithSuper) {
        if (!req.user.hasRole(role) && req.settingUser.hasRole(role)) {
          return res.serverError(403, `Not allowed to change ${role} password`);
        }
      }
    }

    const user = req.settingUser;
    user.passStore = Auth.pass2store(user.userId, req.body.newPassword);

    User.setUser(user.userId, user, (err, info) => {
      if (err) {
        console.log(`ERROR - ${req.method} /api/user/password update error`, util.inspect(err, false, 50), info);
        return res.serverError(500, 'Password update failed');
      }

      return res.send(JSON.stringify({
        success: true,
        text: 'Changed password successfully'
      }));
    });
  }
POST - /api/user/password

Update user password.
NOTE: currentPassword is not required so that a usersAdmin can update anyone user's password.
@name /user/password
@returns {boolean} success - Whether the update password operation was successful.
@returns {string} text - The success/error message to (optionally) display to the user.