HUE-1071 [core] Option to require users to change their password when they first login

- Add tests
- Reuse UserChangeForm
- Add relaxed time constraint on "first_login" check