Log out should immediately expire oauth token

Should expire both access and refresh tokens.