Stop with this forced password nonsense, if their is no real security threat, stop wasting everyones time and forcing them to restart their password. You are basically punishing every player, wasting their time, for the sake of a few gullible players that give out their password. Really, you should deal with them base to base, not shoot arrows at every single base unaffected by said gullible users.
This is just lazy customer support, nothing more. You aren't providing a service, you are providing a disservice.