Revoke application authorizations for characters without verified API keys.

Whenever an API key is updated, all characters on it are now checked
for verified API keys, and if they have none all applications
authorized for that character are deleted. A new function was added to
ApplicationGrant that removes all application authorizations for a user.

Signed-off-by: Tyler O'Meara <Tyler@TylerOMeara.com>