added revoke_token() and token_page() now displays only non-expired tickets