fixes to login process when password has expired