These changes ensure that OAuth2 clients cannot create an unlimited
number of access tokens (sessions) with their client credentials.
Signed-off-by: Michael Mayer <michael@photoprism.app>
This commit also adds an /api/v1/oauth/logout endpoint that allows
clients to delete their sessions (access tokens) as needed.
Signed-off-by: Michael Mayer <michael@photoprism.app>