add UI for users to revoke tokens
strip-down the API for merging to deployed
basic docs for the API