Invalidate sessions when deleting account

[tsudoko]

Split from #27:

the first issue is about the account. If I delete the user in server without deauthorizing the account in the client, the client will still be able to use this deleted account to sync.