Destroy session on password change