the main motivation for this question is, i'm trying to support logout and I'm calling the

revokeAllSessionsForUser

method but it doesn't seem to be expiring the token calling another authenticated endpoint immediately after, doesn't seem to be triggering an error with Session.verifySession() middleware