Token of other device is not expired after password changed

[uysimatpassbase]

1. Set initializer config remove_tokens_after_password_reset to true

2. If we look that the method. It explain we are removing all tokens except the latest token.
   

   devise_token_auth/app/models/devise_token_auth/concerns/user.rb

   Lines 246 to 253 in 8f44a8c

   	def remove_tokens_after_password_reset
   	return unless should_remove_tokens_after_password_reset?
   	if tokens.present? && tokens.many?
   	client, token_data = tokens.max_by { |cid, v| v[:expiry] || v['expiry'] }
   	self.tokens = { client => token_data }
   	end
   	end

3. If other device login later than our current client, his token is not expired and he still be able to access the application

4. The behavior should be expire all the tokens except current client token.