Add token revocation endpoint