My devise users are \"database_authenticatable\" and \"token_authenticatable\". I\'ve tried deleting the \"authentication_token\" field in the database for that user from the co
I believe you can simply update the password_salt and it will invalidate the user session on their next request.
user = User.first user.update_column(:password_salt, 'reset')
Reference: http://www.jonathanleighton.com/articles/2013/revocable-sessions-with-devise/