What is the best way to prompt the user to change their initial password?
When I create the account I set the initial password to something that needs to be changed, like "default". When the user first logs in with that password I want to detect that and prompt them to change it. What's the easiest way to do this? Can I check the password set in the DB or is the best approach to create a "have they changed the pass yet" flag in the DB?
