Add user session termination on role/permission change

[hoeyi]

Statement

As an admin, I want users who have had their roles changed to be required to log in again upon their next access, ensuring that any role-based permissions are applied immediately after the change.

Acceptance Criteria

When role assignment for a user changes (add or remove), the system should do the following:

1. When a role is modified for a user, the system invalidates their current session.
2. On the user's next access request, they are prompted to log in again.
3. After re-authentication, the new role permissions are applied to the user's session.

Additional Notes

Postponed feature from #254