Force password change in Ion Auth

On adding new users, I save a temporary hashed password to the user's record. When the user logs in for the first time, I want to force him to change this password. How can I do this in Ion Auth without modifying the library or model?

You have to write code somewhere. My first thought is somewhere like in `User_m.php`.