to change ords_public_user password:

Java -jar ords.war –config configdirectory config secret db.password

If you user tomcat you need to update the application in tomcat.
create the webapp for tomcat again:

Java -jar ords.war –config configdirectory war appname.war

Replace the old webapp file with the new one the tomcat/webapp directory.
restart tomcat if nessecary.