code: protected function abortIfExpired($id, $userData)
      {
          if (isset($userData['pwreset']) && $userData['pwreset']) {
              $this->session->addFlash("error", "Please set a new password.");
              $this->picoAuth->getContainer()->get('PasswordReset')->startPasswordResetSession($id);
              $this->picoAuth->redirectToPage("password_reset");
          }
      }
docs: Aborts the current request if a password reset is required
  
  Starts a password reset session and redirects to the
  password reset form.
  
  @param string $id User identifier
  @param array $userData User data array