neo4j/neo4j#13471
Seems like a issue of neo4j.
If you want to run command
$ curl -v -u neo4j:neo4j POST localhost:7474/user/neo4j/password -H "Content-type:application/json" -d "{\"password\":\"secret\"}"
You will get a
{"errors":[{"code":"Neo.ClientError.Request.Invalid","message":"Not Found"}]}