Session expiration on all devices is necessary during password resets and in response to anomalies or cyber-attacks.
