Resolve "Redirect to password change page if password expired"

upstream MR

What does this MR do and why?

1. Replace the logic for upstream password expiration.

• Override password_expired？ .

2. Set password_last_changed_at = now when reset password.

• Add before_update :update_password_last_changed_at_to_now hook.

Screenshots or screen recordings

Screenshots are required for UI changes, and strongly recommended for all other merge requests.

How to set up and validate locally

Numbered steps to set up and validate the change are strongly suggested.

MR acceptance checklist

This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.

• I have evaluated the MR acceptance checklist for this MR.

Closes #1947 (closed)