invalidate session after user got an access token
revoke the access tokens of a user if he is deactivated by a replacement
reverted unused added import
- made getBearerToken() static
- corrected typo
removed redundant null check as InMemoryTokenStore.findTokensByUserName() never returns null
Merge pull request #235 from osiam/osng-467

Osng 467: Revoke a user's access tokens if he is deactivated
revoke the access tokens of a user if the user is deleted