force to change password due to hacker problem