When they log in, there should be a forgot my user name or password link. Have them click that and change their password.
