Make sure no more than set in preferences authentication failures are
saved.
Redirect to 'Update Credentials' form if after successful login password
is to expire soon.