enable end-user to revoke refresh tokens