Fix wrong redirect after forced pass change

A new user (`first_login: true`) who is forced to change his password (`forced_password_change: true`) was redirected to the change_password page (instead of my_page) when he didn't get the login credentials right at the first attempt.
Use the new Ruby 1.9 hash syntax.