OAuth2 module:
* token invalidation added
* changes in guest token for client (more similar to regular access_token now)
* some other fixes in existing functionality