added a service operation to revoke access tokens of a given user
added spring security mapping for the /token path