Lockdown

You are correct in that map.resources :users doesn't cover change_password, but change password is an Ajax call and will not be called directly, so it shouldn't need a route, AFAIK.

Have you experienced problems with this not working? If so, if you use NoScript, have you allowed the site you're testing on?

I have had experienced problems with this not working. After adding the line in the routes file, it works like a charm.
And I am allowing Javascript... if that's what you mean by NoScript... otherwise, what do you mean?

It's probably because the template generator doesn't include an application layout which includes the prototype javascript files required to make this call. I was trying to stay away from including a layout and will probably look for a different (non-ajax) method for changing passwords.

I've just created an issue to track this:

http://stonean.com/projects/lockdown/issues/show?id=5

Just a note: I made changes to the _data partial (the partial containing the change_password Ajax definition) and included the prototype.js file and was still having problems.

I'll get this resolved this weekend. Thanks for the update.