Expire user sessions via the API