**Expected Behavior** Spring Security should support https://wicg.github.io/change-password-url/index.html