Hi, A recent pen test has brought up the issue that multiple concurrent/simultaneous sessions can exist for a user. It is suggested that this should not be allowed. Is this something that can be implemented as an option? i.e. only one active session per user. Either the user is prompted to kick out the other session or is just blocked from logging in until the other session ends. If the latter it could go hand in hand with my other feature request of session inactivity timeouts here. Thanks