change accounts revocation URL to '/revoke' (from '/logoutById')