url password change /account/changePwd

views/security.pug

@@ -49,7 +49,7 @@ html(lang="en")
                     for error, i in errors
                         div.alert.alert-danger.alert-dismissible.fade.show #{ error }
                             a(class="close", href="#", data-dismiss="alert", aria-label="close") ×
-                form(class="needs-validation", method="post", action="/changePwd" novalidate)
+                form(class="needs-validation", method="post", action="/account/changePwd" novalidate)
                     div(class="form-group row")
                         label(for="currPwd") Current Password
                         input(id="inputCurrPwd", name="inputCurrPwd", type="password", class="form-control" required)