rewrote revoke_token()