provide only a single revocation operation that revokes access tokens based on the user ID