Full logout needed after admin promotion about ashirt-server

[JoelAtDeluxe]

This is known and expected behavior. A re-login is required on the backend, as permissions are tied to a user session. We can (and probably should) invalidate sessions when the user status changes. I think we do this when users get disabled, but maybe not when they're promoted, or demoted, from admin. If we do this, the user would still need to login again, but they'd be forced into it, rather than requiring an explicit log out/log in cycle.

I can look for other solutions as well.

[JoelAtDeluxe]

So, the logic that logged someone out after a status change (either to admin or disabled) broke somewhere along the way. I'm looking into the best way to fix it now. Once it's done, it'll behave as I noted earlier: a user will lose their session and be forced to log out. When they attempt to log back in, they'll have their new state (admin, disabled, or reversal to a normal user).

Should be fixed in the attached PR.