Fixed #21649 -- Added invalidation of old sessions when user password changes.

https://code.djangoproject.com/ticket/21649