Feature/revoke app

Resolves #112 
We dont' need a 2nd OAuth client. We are not testing whether 2 authorization flows can happen together.