Clients should have an ability to login via SMS verification and to revoke the session (or all sessions) via SMS