first draft at enabling manual user session expiration

[Hamms]

Links

• https://makandracards.com/makandra/53562-devise-invalidating-all-sessions-for-a-user

Testing story

Deployment strategy

Follow-up work

Privacy

Security

Caching

PR Checklist:

• [ ] Tests provide adequate coverage
• [ ] Privacy and Security impacts have been assessed
• [ ] Code is well-commented
• [ ] New features are translatable or updates will not break translations
• [ ] Relevant documentation has been added or updated
• [ ] User impact is well-understood and desirable
• [ ] Pull Request is labeled appropriately
• [ ] Follow-up work items (including potential tech debt) are tracked and linked