Users should revoke their own tokens

Currently, to revoke a token the user who initiated the request should be added into knox.token.renewer.whitelist. It's very reasonable and useful to allow a user to revoke their own token(s) w/o the need to add them to knox.token.renewer.whitelist.