[ceejayoz]

Not only is it unnecessary, it won't do anything. One of the big points of access tokens is that they survive password changes, so a user can change their credentials and not have to reauthorize a few dozen apps.

[tantalor]

"If the user changes their password, the access token expires" [http://developers.facebook.com/docs/authentication/]

[ceejayoz]

That's not the case if `offline_access` has been requested.