require users to change password if they are using a temporary password
fix missing authFactory from ChangePasswordController