Add revocation methods to OAuth2Handler

I noticed OAuth2Handler had no revocation methods which made it rather difficult to revoke tokens.
I was thinking something akin to this, what do you think? Not tested because not confirmed.

Cheers