added in forcing password change flag