seems we fixed the case where the token is revoked at the authorization server, issue #2