NXP-10790: Allow token revocation by TokenAuthenticationServlet (+ add TokenAuthenticationService#getToken)