add password change functionality. handles the must change password on first login requirement.