Refresh token must be revoked before access_token
Because access_token is needed to revoke refresh_token