first pass implementing revokeToken

UI available at server.com/att/showTokens