data/db: add SessionsForUser function
api/users: delete all sessions on user deletion