Sessions should be cleared if the user is deactivated
Currently the sessions are cleared if the password of a user is changed. But this does not happen when the user is deactivated. I think it is crucial that the sessions are also cleared if the user is deactivated as it is not clear to the admin that deactivating the user will not kick him out immediately.