<form method="post">
	<p>if you are concerned that your account may have been compromised, you can terminate all other login sessions by invalidating their session cookies. note that this will not have any effect on API tokens; these must be revoked separately!</p>
	<div class="elem">
		<label> sessions valid from </label>
		<div class="txtbox">@lastreset</div>
	</div>
	<button type="submit" name="act" value="invalidate">
		invalidate other sessions
	</button>
</form>
