Crowd SSO sessions allow access after a user is removed from a group until session expires

Once a user has a valid SSO token from successfully logging in to an application, if they are then removed from the groups permitted to use that application they will still be able to login until that session expires.