#22 : in GAE, after login, user is redirect to change password