Mark token as invalid if the password doesn't match

lib/private/Authentication/Token/DefaultTokenProvider.php

lib/private/Authentication/Token/IProvider.php

lib/private/Authentication/Token/Manager.php

lib/private/Authentication/Token/PublicKeyToken.php

lib/private/Authentication/Token/PublicKeyTokenProvider.php

lib/private/User/Session.php

tests/lib/User/SessionTest.php