did some investigation on this it seems for me to validate this i can use the getAllSessionHandlesForUser mehod for that