DELETE /api/users/{user_id}/refresh_tokens/{refresh_token}
GET /authorize for offline access