invalidateToken

An optional security measure to make sure that even if an attacker gets ahold of the token, it will be invalid.

Note that this will currently only be called once on logout, and as such any network issues it will fail silently, and the token will not be revoked.