for that try following,
1.In ur UserLogin table add bit field IsPasswordUpdated set defult null value after registor user.
2.In login check IsPasswordUpdated field based on user name and password. if retunrs false then update IsPasswordUpdated = 1 and redirect on change password page else defult page