invalidate user sessions. Fixed investigator initialization error. Fixed
password handling for new user operations.