Hi,

Basically you can't. The user still has the security token it got when he logged in. It only changes the next time he logs in.