Add a way of invalidating a users session tokens