gistfile1.py

@require_POST
def update_password(request):
    payload = json.loads(request.body)

    password = payload.get('password', None)
    password_confirm = payload.get('password_confirm', None)

    unique = set([password, password_confirm])

    if len(unique) > 1:
        return JSONResponse({
            'messages': ('error', 'The two passwords provided do not match.')
        })

    if len(unique) == 1:
        request.user.set_password(password)
        request.user.save()

        if request.user.check_password(password):
            return JSONResponse({
                'messages': ('success', 'The password was updated successfully for %s.' % request.user.email)
            })

    return JSONResponse({
        'messages': ('error', 'You must specify a password and password_confirm field.')
    })