force_password_reset enforcement

[silverark]

When force_password_reset is set in the users table, the user is redirected when they first log in but they can easily navigate away from the page without changing their password. We can redirect on every page load to make sure they change their password? I wasn't sure where this change would go.

[lonnieezell]

Ah, good catch. That should probably be part of the LocalAuthenticaion::isLoggedIn method.