AuthLogout (revoke refresh token)