Login sessions management

Implement custom logic for session management. Use existing table to store history.

In the account detail view:

- List of actively logged sessions that have not been marked as logged out.
- Ability to see which sessions are currently online (including propagating status to other application layers)
- A button to log out all sessions other than the acoustic one
- Button to log out all sessions, including the current one
- Automatic logout of all sessions if the user is locked out

Sessions must be authenticated in keep-auth requests. If the session is no longer valid, automatically log the user out.

Allow administrators to log out sessions of all other users (security).

Start by locating the existing session-history table, the account detail view, and the keep-auth request handling. Trace how session validity and online status are propagated across application layers, then define coverage for listing sessions, logging out selected or all sessions, administrator actions, and lockout behavior. Done means invalid sessions are logged out automatically and all requested controls work consistently.

Written by the indexing model from the issue text.