remove obsolete (and revoked) access token