title: spring security: password change page implementation
body: <p>I'm new to spring and web development at all. I want to implement user password change funcionality. Till now, I have used only paths in this way:</p>
  
  <pre><code>@RequestMapping(value = "/timetable/{year}/{month}/{date}", method = RequestMethod.GET)
  public String timetableDateJump(@PathVariable("year") int year, @PathVariable("month") int month..)
  </code></pre>
  
  <p>But I don't want user's pass to be passed just in url. How is it done in web services? What is a normal why to implement that? </p>
  
  <p>btw: of coruse i should pass the password from user tpo server and hash it on the server side, right?</p>