[Swagger] UpdateUser DTO should be ‘password’ instead of ‘token’ field

[mutoe]

In fact, only the password field works. Although no error is reported when the token is passed in, the user's password will not be modified.

https://github.com/gothinkster/realworld/blob/3e581cb2de90fe68f25fd3bfc428af27e528336f/api/openapi.yml#L697