Send an email to the user when an access token is generated, include a link to revoke it.
Send an email to the user when an access token is generated, include a link to revoke it.