refactored the mechanism for preventing login of deactivated users
added a service operation to revoke access tokens of a given user
added spring security mapping for the /token path
revoke the access tokens of a user if he is deactivated