1) If password is expired redirect to reset password is fixed
2) After user is created on fist login of the user, user should be redirected to reset password screen
3) On reset password password expiry is set to 30 days after the reset of password hence user will be prompted to reset password after 30 days