Unfortunately, you can't look up sessions by user, so you've have to
load every active session and see if its for the user you wish to
logout. Alternatively, you could create your own mapping of users to
sessions, or add some middleware that verifies the user is active on
every request, and signs them out if not (so the logout wouldn't happen
during the cron job, but rather the first time they try to access the
site after being marked inactive).
_Nik