yes that would solve my initial observation
in addition to this I think tokens should also be invalidated when a account is disabled currently they don't seem to be.
yes that would solve my initial observation
in addition to this I think tokens should also be invalidated when a account is disabled currently they don't seem to be.