add support for token revoking; issue #49