If a user has a password expired, the Spool Web interface is unable to intercept this situation and always re-proposes the userid and password. It should instead ask to enter the old and new password.
Release : Output Management Spool for z/OS
The ability to detect that the password of the userid is expired is a web server configuration. In this case the IBM HTTP Server (IHS).