https://blog.oppedahl.com/financial-manager-forcing-password-changes/