Remove all other tokens when a connection calls `changePassword`