Document that provider-side account disablement can invalidate existing authenticated sessions, not just new login attempts.