Fixed #21649 -- Added invalidation of old sessions when user password changes