Change (or set) the signed-in user's password

current_password is required and checked when the account already has a password. A Google-only account has none, so this sets the first password instead of changing one — the session itself is the proof of ownership in that case. Every OTHER session on the account is invalidated; the one making this call keeps working.