LDEV-3656: When authenticating, if there is already a session mapped to a user's login, invalidate it. This will abort current authentication process too, so the user will be thrown out from the previous browser, but will not be let in on the current browser. Only subsequent attempt(s) to log in should succeed.