Changing password should log out every token #112

When you reset or change your password, your old tokens keep working. So if someone has stolen a token they keep access for up to 30 days, even after you've changed it.

Password change should kill all of that account's tokens. logoutall already does this, so it just needs calling.

accounts/api/views.py 263-266