BAC-1503 fix routes /revoke instead of /token/revoke