title: REST service: HTTP code for forcing a change of password
body: <p>What is the correct HTTP status code that should be returned by a REST service when:</p>
  
  <ol>
  <li>The user has attempted to login with a first-time computer-generated password;</li>
  <li>The password provided by user is correct;</li>
  <li>The user must change the password before he/she can continue to do anything.</li>
  </ol>