Keyword: Password

major

Force password change when administrator assigns password

minor

Specify database passwords encrypted

minor

No session invalidation during login and password change process