Add API for disconnecting websocket clients

[mpaolini]

use cases:

• a user logs out: forcibly disconnect all websockets authorized with the same access token
• a user account is suspended: forcibly disconnect all websocket for that user