Only allow one session

atst/domain/users.py

@@ -89,6 +89,13 @@ class Users(object):
         db.session.add(user)
         db.session.commit()
 
+
+    @classmethod
+    def update_last_session_id(cls, user, session_id):
+        user.last_session_id = session_id
+        db.session.add(user)
+        db.session.commit()
+
     @classmethod
     def finalize(cls, user):
         user.provisional = False