user.setPassword(req.body.password, ok(next, () => {
      res.status(204).end();
    }));