Not a bug
Password change lands on a page that lists and allows immediate invalidation of all sessions, at the user's discretion.