Behavior: Updates the authenticated user's password. The current password must be supplied for verification along with the new password. The existing access token remains valid until expiration.

Authorization: Requires a valid Bearer token ([Authorize]).

Side Effects: Updates the user's password. The existing token remains valid until expiration.

Error Scenarios: Returns 400 if the request is null or the authenticated user's email cannot be determined. Throws if the user account is disabled or the current password is incorrect.