client token revocation is functional