Bug 1009013 - Require a user to change their password if they log in and their current password does not meet the password complexity rules r=glob, a=sgreen