-- Apply once to databases created from an older schema.
-- Existing accounts are not forced to change; new staff accounts created by the app are.
ALTER TABLE users
    ADD COLUMN must_change_password TINYINT(1) NOT NULL DEFAULT 0 AFTER is_active;