Add Endpoint to the controller that lists all active login sessions

[tim-fabian]

This can be done by getting the familyIds of refresh tokens of the current user.

It might be usefull to provide a way for the user to invalidate those sessions.