title: Django force password expiration
body: <p>Are there any django apps for force expiring the password of the user after certain interval like 30 days? I am using djangp's auth and want to extend it or use a community app.</p>
  
  <p>What I have tried so far:</p>
  
  <ol>
  <li>Added a field to user profile for storing the date of last password updated.</li>
  <li>Extended the login method to check for this date and redirect the user to password change page.</li>
  </ol>
  
  <p>What I am confused about:</p>
  
  <ol>
  <li>To block the user accessing the site till the password is changed.</li>
  <li>User should not be able to login or just type urls to access the page directly.</li>
  </ol>
  
  <p>Please note that I don't want to use middleware as it will be a resource constraint.</p>