I am working on an application and would like to force users to update / change password. I am generating a magiclink and sharing with the user via email. I would like to force the user to update their password. until the password is updated, they will have limited app access / visibility. What is the recommended best practice to force users to update password.