title: How to invalidate user in CAS server
body: <p>I implement CAS server 4.0 for SSO. I have 3 apps (Spring web MVC with Spring CAS security) connect to CAS server. I configure CAS server to manage ticket by JPA and check authentication in CAS by username. Currently I'm creating forgot-password function for my apps, my issue now is how to invalidate user cookie/session on CAS server (or logout them) after password has been reset (noted that they can log in by a user and execute forgot password for another user). Can we do it with CAS? Any help will be great appreciate. Thank you guys. </p>