revoke authorization code when it is used
v0.3.5