Customer Portal: Handle force password resets from login response

[adamjudd]

Details

A successful log in response will now also include a force_password_reset variable, which if true means that the customer should be forced to set a new password for their account (usually because they've used a temporary password to log in).

If we detect force_password_reset=true in the response details, we should push the customer directly to their profile section to set a new password, or alternatively show a new UI that is just for entering a new password, before they can do anything else.