Is there a way to force IMP 3.0 users to change their initial password? I considered putting a redirector in, but though I might end up creating a security hole or just jacking up the IMP. tc