check for accessToken before revoking