Add check for no username passed

Direct calls to expiredpassword page redirects to main login page.