master
if ( request.method != 'OPTIONS' and request.endpoint is not None and current_user.is_authenticated() and current_user.force_password_change and