Revoke Refresh Token on Logout

[jose.afernandes]

+1 here, this is an absolute need because of:

@chris.witheridge

This leaves it available for use if it is compromised on the client-side or in transit.

No support in the SDK means many security issues for sure for many users of Auth0.