Add a checkbox to the Security Tab to make a user change their password on their next sign-on in order to continue using the CMS Admin area. Our school district has a bad habit of asking for a password reset and never changing the defaults we set. We've had staff 'vandalize' pages from other departments with wrong info.