Password change rejected behavior in a custom login page

I have a custom login page in an access policy. When a user's password has expired, they're prompted to change it. If they attempt to use a previous password, the AD module fails and the login page...