I couldn't find this in the archives. Using Basic or Digest auth... Is it possible to list the current authenticated user sessions? Is it possible to deauthenticate a user and thereby force an authentication prompt on the next request from his/her browser?