Add support for token revokation

This PR implements the RFC 7009 (https://tools.ietf.org/html/rfc7009) related to token revocation.

This is the feature I want for 0.5 branch, before refactoring the code for 0.6.

ping @Ocramius @mac_nibblet