Rework user sessions system

[partydragen]

Tasks:

• Switch session to use hash
• Logout all other hashes when user changing password and enables tfa
• Update database
• Add new UserCP page to view sessions

[tadhgboyle]

Two comments:

• "Add new UserCP page to view sessions"; this means we will require templates to update, meaning it will have to be in a major 2.x.0 update
• Is it possible to store the login method in the sessions table? Would be neat if we could display how they logged in on each of their active sessions!

[partydragen]

Two comments:

• "Add new UserCP page to view sessions"; this means we will require templates to update, meaning it will have to be in a major 2.x.0 update
• Is it possible to store the login method in the sessions table? Would be neat if we could display how they logged in on each of their active sessions!

1. Not really a breaking change but people need to update their templates yea, at the same time this is a security feature with make it important, Lets see what Sam says

2. Should be possible yea by using the existing method param with show username/email/oauth atleast

[tadhgboyle]

Is displaying the sessions in StaffCP delayed as well, or will that be added to this PR?

[partydragen]

Is displaying the sessions in StaffCP delayed as well, or will that be added to this PR?

Delayed so pr is done

[supercrafter100]

Im guessing everything has been tested and confirmed working?

[partydragen]

Im guessing everything has been tested and confirmed working?

Have tested yea, was not really that major changes and is only installer, login, re-auth and oauth that using login and its all using the user login function so it worked everywhere by my testing, the changes itself is pretty simple