Invalidation of access tokens on refresh

Original message was deleted