Add token revocation

Had to refactor a bit to expose the MS SDK to the ShowToken page and
properly initialize RequestFactory, without duplicating code.