When `User`'s role is changed then expire his token and logout

or logout from frontend, hopfully when the token is expired it will return to the user `Unauthenticated` status and we will be able to just delete the token and make user login again, if not then make it work so.