Hi Jurij,

The classic scenario is: the user logs on, goes off for coffee and someone else runs in & changes p/w. The other person can then access the application from elsewhere, until the original user has to log on again (say next morning) when the p/w mess gets sorted. Re-validating the p/w avoids this.