support revoking token for oauth & refine code