Deleting/revoking sessions from settings

[ehanahamed]

Description
Right now when users log in they get a session cookie. When they do something that requires them to be logged in, the server checks their session cookie (and gives them a new one because sessions expire).

Users should be able to log out of other devices (by deleting/revoking session tokens) from the settings ui.

Related
gh issue #11