Forced password change at first login and frequently thereafter

According to RFC2617, The Basic authentication scheme is not a secure method of user authentication, nor does it in any way protect the entity, which is transmitted in cleartext across the physical network used as the carrier. HTTP does not prevent additional authentication schemes and encryption mechanisms from being employed to increase security or the addition of enhancements (such as schemes to use one-time passwords) to Basic authentication.

Currently the password of the basic authentication is given by the administrator when Chartmuseum is installed. The password should be changed at first login and frequently thereafter.

Should we do the enhancement? And I notice [gin-gonic/gin](https://github.com/gin-gonic/gin) is used for http routing. If we do this enhancement, we need to contact gin-gonic/gin?