Add option to force new users to change their password (#1486884)

Domain and storage_host is not the same. You can use $_SESSION variables here the same as in init(). To not duplicate the code I propose an additional private method where we'll check exceptions and hosts. Then we can use it in init() and login_after(). Also, in init() you should call this new method only if $rcmail->task == 'settings'.