Bind token revocation to clients

Token revocation searched only by token hash without verifying the token belonged to the authenticated client, allowing any client to revoke another client's tokens in violation of RFC 7009 section 2.1.