This commit applies the password_expiration setting to all users. Users won't be able to do anything other than update password until it's done.