change-password URL published
/.well-known/change-password answered successfully.
Why it matters
Password managers use that URL to deep-link users to the change-password screen.
What to do
No change is required if the URL redirects to your real password-change page.
Reference
Server and framework disclosure headers reveal implementation details useful to attackers.