add deleteRefreshToken method to Api