lc-esp-engine: Working password changes; necessary refactors so this API call can only reset the logged-in user for complicated reasons

lc-gdn-api-svc: Re-integrated the password update handler with the new API structure, re-introduced oldPassword so this functionality can work w/o a supervisor account

lc-gdn-api: Moving more towards ESP architecture; splitting out AD; stubbing out user password chang handler