If not superuser, force password change on first login