2. Authenticate thru JSON (for the LDAP module) - this could be done by invoking module directly or
setting LDAP chain as Organization Authentication Configuration for a realm
3.Take the authId and place it in a json callback e.g forgotten password - then wait a couple of minutes for session timeout
$. Then call do a password change. The error returned is not useful
with "Incorrect number of callbacks found in JSON response"
and status code 400 (Bad Request)
A more meaningful response should be returned.