[FEATURE] Revoking sessions

[jdabtieu]

• [x] I've searched the issues

Feature Request

I wonder if there's a simple enough way to invalidate/revoke existing sessions. This is especially useful for when a user changes their password, or if an admin has detected suspicious activity on an account and wants to log out all instances of said account. Flask-Login implements this with alternative tokens, which we might not be able to do, but there probably exists some way for us to achieve the same goal