Should Email be automatically sent to users when their password has expired when using Username Password authentication?