public async Task ChangePassword(int userId, string oldPassword, string newPassword)
        {
            if (!await _passwordProvider.IsPasswordValid(userId, oldPassword))
            {
                throw new UnauthorizedException(userId);
            }

            if (!await _passwordProvider.UpdatePassword(userId, oldPassword, newPassword))
            {
                throw new UnauthorizedException(userId);
            }
        }