Use expires_in data send by Microsoft to invalidate access_token