Create API endpoint to sign out of all devices. This will also require making refresh tokens revokable