fix(users): Add force rotate password on first login for non-email flow

fix(users): Add force rotate password on first login for non-email flow #1674