[Authorize] public ActionResult ChangePassword(string currentPassword, string newPassword, string confirmPassword) {}