Add "revoke all tokens" option to client list

[jricher]

Admins should be able to revoke all active tokens for a client without necessarily deleting it.

[jricher]

This needs to be able to avoid accidentally removing the registration token