-- +goose Up
-- Cookie sessions (scs) store opaque token/blob rows with no user_id index.
-- Bump session_version on password reset so RequireSession rejects stale cookies.

ALTER TABLE users
  ADD COLUMN IF NOT EXISTS session_version INT NOT NULL DEFAULT 0;

-- +goose Down
ALTER TABLE users DROP COLUMN IF EXISTS session_version;