Invalidate session after email change

[duderuud]

How to reproduce:

Multiple browsers on the same device

1. Log in to your account from two different browsers.
2. Change the email address in the settings from one browser.
3. Without logging out, check the other browser.
4. The session is "updated" instead of being invalidated.

Multiple computers

1. Log in to your account from two separate computer systems.
2. Change the email address in the settings from one computer.
3. Without logging out, check the other computer.
4. The session is "updated" instead of being invalidated.

Please invalidate the session after an email change to enhance security.