OAuth 2.0 token revocation (RFC 7009) implemented