backend/authmanager: add remove functioanlities

[karolherbst]

currently we can only add new Tokens to our Authmanagers. But we also need to remove tokens through two ways:

• [ ] via a removeToken(s) methods
• [ ] autoremove after expiry