On a TRB140 I also needed to change the password via ssh and then prevent the website from requesting a password change.
Changing password was done via `passwd` command.
Then to stop the website asking for a new password, by trial and error I found the following uci commands did the trick:
uci delete luci.main.firstlogin
uci commit
luci-reload