authentication-service: All user sessions should be expired when user's password is updated

[rashisf]

Is your feature request related to a problem? Please describe.
This has been reported as a security vuknerability.

Describe the solution you'd like
When the password of a user is updated, all the ongoing session of the user must expire.
Try to implement a provider for this, in case it can be override

Describe alternatives you've considered
Since the auth flow is stateless, this can be checked during token refresh when the access token gets expireds