title: How to force Invalid Bearer token in web api?
body: <p>I had to delete over 90 users in my web api.
  I am using web api 2 individual account.
  But after deleting this users, they still can use my web-api, because access token are cached somewhere.
  How to prevent that?</p>