Revoke user authentication token

Revoke an authentication token belonging to the user. A user may revoke their own tokens; revoking another user's token requires MANAGE_USERS access right.

Only persistent tokens can be revoked this way, because only they are assigned an ID; a token-id of 0 is rejected with 400. Ephemeral, service and single-use tokens are not revocable individually - they expire, or, for a single-use token, are consumed by the login that spends it.