Initial log in with system generated password takes user to "change password page

first time user logs in with new credentials - either from first log in or pw reset, user is presented with screen to change pw

password requires same validation as system generated and UI should display these rules:

6-12 characters, min one CAP, min one number.

see attached