The Gitea team reports:
This PR refactors and improves the password hashing code within
gitea and makes it possible for server administrators to set the
password hashing parameters.
In addition it takes the opportunity to adjust the settings for
pbkdf2 in order to make the hashing a little stronger.
Add command to bulk set must-change-password
As part of administration sometimes it is appropriate to
forcibly tell users to update their passwords.
This PR creates a new command gitea admin user
must-change-password which will set the MustChangePassword flag on
the provided users.