Only generate tokens once, not on every save
Add functions to revoke refresh and authorization tokens
Automatically revoke tokens