Revoke refresh token upon logout