If the user retry to login, it will be accepted without the second factor. This patch force the session to be cleared and reloaded with the default values