Osng 467: Revoke a user's access tokens if he is deactivated

is it really possible that `tokens` is null at this point?