method and endpoint to revoke an access token