Limit active sessions per user