Delete all user's sessions when it changes its password (refs #3836)

When a user changes its password, all its sessions will be deleted
except the one currently in use.