Avoid infinite redirect loop after expirable time change

This will re-check need_change_password? to avoid redirect loop if the date is changed after the warden session variable is set and before the password is changed.