[Bug 1174830] VUL-1: CVE-2020-1776: otrs: Invalidating or changing user does not invalidate session