Reauth controller

Reauth controller is triggered by a push from sign-on-o-tron. After
validating the request, all sessions associated with a user are deleted.