Revoke refresh tokens after password reset

See my other post here: Revoke offline token on logout - #2 by xgp