Invalidating older session when one user is connecting with same
credentials