modified user module, allow to ask user to change password at first login