don't update the revoke time if we reuse the token