Only process password expiry on manual logins (prevent conflicts with things like ldap/saml/etc)