[#8130] invalidate other login sessions after setting up two-factor auth
3 files changed