---
features:
  - >
    Token responses will now have a ``password_expires_at``
    field under the ``user`` dictionary.
    If PCI support is enabled, the ``password_expires_at``
    field will be populated. Otherwise, it will default
    to ``null``.