Auth invalidation support on expired tokens

This adds invalidation support as outline in https://github.com/Retsly/retsly/issues/939.

Review please @slajax @switters