* feat(api): add password reset and change to user service * integration tests * invalidate password check after password change * handle notification type * fix proto