by Peter Bowen.
Emma - thanks for starting the train of thought.
If you have direct access to the database, simply delete the email address from there. When they login, it will request their email address. (I just tried it on my system and it works)
Cheers
Peter