Previous OAuth2 access tokens not being invalidated on reauthorization

[Sophira]

For clarity: This is using the same client ID, of course.