[PB-2153] feat: do not request the user's password in security endpoints

[PB-2153] feat: do not request the user's password in security endpoints #473