Added ability to revoke tokens as per RFC7009

see https://tools.ietf.org/html/rfc7009#section-2