Account security hardening (session revocation, encrypted integration tokens)