Add configuration to invalidate all the remember me tokens when the user signs out.

Closes #2862

This PR adds the `expire_all_remember_me_on_sign_out` configuration, that  when enabled will invalidate all the remember me tokens when the user signs out. Without it, the remember me tokens won't be invalidated.

cc/ @josevalim