...
where <sessionToken> is that returned by "Initiate Session", below. the "password" field is optional. If omitted, the password is not changed.
Note the authentication service manage the properties shown (principally the userId and password) while the repository services (below) manage other related user attributes.
...