Add a flag to request a user change their password on next login.