added revoke token support for web server applications.