VIVO-825 do not allow access to APIs if the account is not in a valid state.

Before testing the password, test that the account is well-formed: first name, last name, email.
After testing the password, check to see whether a password change is required.