Implement a feature to force users to change their password
Prune all active sessions of users when their password is changed