title: Remotely log out user on credential change
body: <p>I have a method for an administrator to change a user's password or email address/username manually.</p>
  
  <p>However, if the user has been using the application and has an auth cookie, when the come back to the site, they'll still be authenticated with the application, even though their password has changed.</p>
  
  <p>How can I force these users' cookies to be flagged as invalid, and force re-authentication when they load a new page? </p>