Fix revokeToken methods for Google and Facebook + check if user is locked

This pull request fixes the way the resource owners revoke tokens for Google and Facebook