refactored the mechanism for preventing login of deactivated users
added a service operation to revoke access tokens of a given user
added spring security mapping for the /token path
revoke the access tokens of a user if he is deactivated
invalidate session after user got an access token
revoke the access tokens of a user if he is deactivated by a replacement
reverted unused added import
- made getBearerToken() static
- corrected typo
removed redundant null check as InMemoryTokenStore.findTokensByUserName() never returns null
Merge pull request #235 from osiam/osng-467

Osng 467: Revoke a user's access tokens if he is deactivated