oops. little wrong as you have classic but similar idea. The user has to go into their profile and change their password if they so desire.

.