add force_prompt option to enforce new password prompt for use with Toke...

I needed this to enable to parallel use of krb5 and radius (with a hardware token). I wanted to enforce the password prompt so that no old passwords are send to the radius token server.