Password expiry

Set password expiry at 2AM to avoid users being logged out during working hours.

Also propagate error message from backend to front end when change password fails.