iCall to clean up the stale SSL session when a client reconnects

You wouldn't use an iCall. The very best you could do on the server side is to invalidate an existing SSL session with the SSL::session invalidate command. You would have no control over the browser side.