soft delete api token and access token