We need to make sure that when revoke token API gets called all access tokens are deleted from cache so we can be sure that user no longer has access to our API(s), this also allows for longer access tokens TTL.

Notes:

• as an idea we can prefix token cache with username of the user so then we can easily invalidate cache