Feature/revoke app

Resolves #112 
This belongs in its own spec file. This spec is for the OAuth flow, not admin dashboards.