Password must change is selected but user is not forced to change password