delete oauth token from datastore if it has been revoked; change Assert signature to not require operands beyond assertion condition