Add the invalidate_all_sessions_on_logout configuration to invalidate
all the remember me tokens when the user signs out.