added a logout function (fixes #65)

This calls the api endpoint /oauth2/revoke and sets back the tokens and the tokenexpiration. 
Sadly a success block wasn't executed so I had to set the tokens to invalid no matter if the call goes through or not. Any advise on how to improve this would be welcome.