Associate current API token with session so that all sessions are revoked on API key regeneration.