Only allow one session

atst/routes/__init__.py

@@ -8,9 +8,9 @@ from flask import (
     url_for,
     request,
     make_response,
+    current_app as app
 )
 
-from flask import current_app as app
 from jinja2.exceptions import TemplateNotFound
 import pendulum
 import os
@@ -123,8 +123,11 @@ def redirect_after_login_url():
 
 
 def current_user_setup(user):
+    session_id = session.sid
+    app.redis.delete("session:{}".format(user.last_session_id))
     session["user_id"] = user.id
     session["last_login"] = user.last_login
+    Users.update_last_session_id(user, session_id)
     Users.update_last_login(user)