Add support for user session destruction and token validation and invalidation