send password in body of request

src/views/studio/lib/studio-member-actions.js

@@ -194,11 +194,12 @@ const transferHost = (password, newHostName, newHostId) =>
         const token = selectToken(state);
         newHostName = newHostName.trim();
         api({
-            uri: `/studios/${studioId}/transfer/${newHostName}?password=${password}`,
+            uri: `/studios/${studioId}/transfer/${newHostName}`,
             method: 'PUT',
             authentication: token,
             withCredentials: true,
-            useCsrf: true
+            useCsrf: true,
+            json: {password: password}
         }, (err, body, res) => {
             const error = normalizeError(err, body, res);
             if (error) return reject(error);