Remove oauth controller dependency on token_api

The oauth controllers now use a mixture of internal callbacks and
the token_provider_api.validate_token instead of directly calling
the token_api delete token methods.

Change-Id: I454a592747dc5a4438541a8cecbcd796dd8378ab
bp: non-persistent-tokens
Merge "Remove oauth controller dependency on token_api"