This change adds an rb-site manage /path/to/site invalidate-api-tokens command

that allows administrators to invalidate the API tokens for a set of users. Now

tokens can be invalidated individually via the API, or in batch with this

command.

Manually tested the command and checked that the right tokens were

being invalidated.