[change-pwd] force user to change password when first login if he(she)
             was added by admin or his(her) password has been reseted