added a service operation to revoke access tokens of a given user