Added some support for updating a user's password and invalidating all his login credentials, nested SQL transactions