Fixed #21649 -- Added invalidation of old sessions when user password changes.

Thanks Paul McMillan for guidance and reviews.