Any **kwargs passed to email_user() are passed to the underlying send_mail() call.
Added test for SessionAuthenticationMiddleware

Changing a user’s password now invalidates old sessions if the SessionAuthenticationMiddleware is enabled.