added user shouldRenew is password flag in the userData object returned when a user is authenticated (login), but need to renew password