user-update fixes

logging out all session of a user when changing password or status to one where you cant log in