There is currently no standard way to disconnect a session.
We are using the error() hack throughout the code for disconnecting the
current session, but this does not work when the session to be disconnected
is not the current session.
Some features waiting for this:
- we do not allow deleting a user account, since that requires
disconnecting all resources
- we do not allow a new resource to replace an existing one