First login requires setting the password