added a redirect when the credentials expired occurs for login, adding parameters for configuring password strength