Comment by mattl

Make it so they have to change it when they login. But also do not allow a simple password to be used ever.