Users logging into a C# ASP.NET Web forms application must not be able to bypass the change password page

Users logging into a C# ASP.NET Web forms application cannot by pass the change password page called ChangePassword.aspx in the instance of their password having expired. Currently, the user can bypass the change password page and navigate to any other page. Is there something I can do in the Web.Config file to stop a user going to the browser URL address bar and changing to a different aspx page.