implemented middleware to force invited students to change their password (no custom template yet)