Plex users face mandatory password reset after data breach