Add revocation methods to OAuth2Handler