router.post('/newPassword', function (req, res) {
  User.newPassword(req.currentUser, req.body.password, function (err) {
    res.send(200);
  };
});