add ability to query expire_password_after from DB