expose the ability to invalidate tokens using the Api