don't immediately refresh the client token after revoking it