fix /invalidate and /refresh oauth endpoints for swagger / a127 use