> a better flow might be to tell the user to logout of all their devices and then try to login again In our case this more of a malicious abuse of our system