Add password guidance to password-expired page