Revoke refresh token on logout (cherrypicked)

Change-Id: I30504a15e36d60a832d3a9b8fcd8286ff8400464
diff --git a/Changes b/Changes
index 7d28cfa..ef8de58 100755
--- a/Changes
+++ b/Changes
@@ -10,6 +10,7 @@
         - Fix treatment of legacy "collection" parameter.
         - Fix pagination by not repeating page value in URL.
         - Added auto-refresh of OAuth tokens.
+        - Added token revocation on logout.
 
         WARNING: This requires relogin for all users!