I need to immediately invalidate and log out any other logged in sessions when a user changes their password, but allow the active session (who has just updated their password)
Don't set validation interval to TimeSpan.FromMinutes(0), as that causes the sign in cookie to be issued immediately, set it to something like 1 second instead.