moving expired password message location