Add the invalidate_all_sessions_on_logout configuration to invalidate
all the sessions when the user signs out.