First, write the whole thing as a normal CGI+pure HTML page, and get the functionality working that way.

After you have the working application, it's easy to add a toolkit like jQuery to re-style the "You need to change your password" message.

Your application needs to work with Javascript disabled, otherwise users will circumvent the password change prompt by disabling Javascript.