integrate token revocation flow