Add authenticated session listing and revocation APIs, track the auth provider on sessions, and expose active session controls in account security settings.
Matthew Meszaros