People can get in, and only the right people
Sign in with Google, with Microsoft, with your company’s own identity provider over OIDC, or with a link sent by email for anyone who has none of them. Sessions are rows in your database, so you can end one. Nobody has to be given a password to forget.