included invalidation of token (locally) and some Logger logging