force logout all connections to my account

So I made a mistake and responded to an email that I thought was Xfinity and turns out it was a phishing scam and they got into my email account and sent out messages pretending to be me.  I have changed the password and I have removed the auto-forward and filters to resolve the issue.  However when I look at recent activity there is no signs of them logging into my account since changing my password, but they still much be logged in as they re-established the auto-forward and put the filters back on which I removed again.  Now this morning when I checked my email, they were all in trash so I need assistance on getting all devices and connections to my account logged out so they are forced to reconnect and use two-factor.