Add an option to force users to change password on first login

[justinz2021]

I created an account for someone to do posts on one of our WordPress sites. We don't have email set up on that site and don't want it.

However, I'd like the user to change their password the first time they log in.

I have asked them to do this in the email I sent them with their login credentials, but it would be nice to have a checkbox in the user creation form so I can enforce it.

PS it would be nice if the Contributor Focuses: tags had a security tag as this is related.