Backport "Auth: Clear Tokens of Expired Sessions on Startup" to 26.3.x / v2.10.x