Require new users to change password on first login

[scott-r]

There is a fixed default password used for all newly created users. We should set the appropriate Cognito attribute to require the user to pick a new password upon first login.