This may be a bit late, but though to post a solution that worked for me. The change password statement needs to be run against the system db. So the url in curl would be http://localhost:7474/db/system/tx instead of http://localhost:7474/db/neo4j/t...
