Bingo. All they had to do is delete all the login tokens. Users with what would have otherwise been a valid cookie would have had to re-log in, but that&#x27;s a minor inconvenience that&#x27;s expected to happen from time to time.