* Modify overloaded web_login action to not trigger a password expiration check
if the login process is not complete yet (e.g. due to auth_totp)
* Add unit test for new logic
* Fix warning caused by unrelated unit test
* Add logic to overloaded web_login action to log out users with expired
passwords, preventing the password reset from being ignored
* Add unit test for new logic
* [ADD] res_users_password_security: New module
* Create new module to lock down user passwords
* [REF] res_users_password_security: PR Review fixes
* Also add beta pass history rule
* [ADD] res_users_password_security: Pass history and min time
* Add pass history memory and threshold
* Add minimum time for pass resets through web reset
* Begin controller tests
* Fix copyright, wrong year for new file
* Add tests for password_security_home
* Left to do web_auth_reset_password
* Fix minimum reset threshold and finish tests
* Bug fixes per review
* [REF] password_security: PR review improvements
* Change tech name to password_security
* Use new except format
* Limit 1 & new api
* Cascade deletion for pass history
* [REF] password_security: Fix travis + style
* Fix travis errors
* self to cls
* Better variable names in tests
* [FIX] password_security: Fix travis errors
Stefan Rijnhart
Oleg Bulkin
Dave Lasley