Comment 5 for bug 1202952

Thanks Dolph, obviously my delivery could use some work... The code excerpts were taken before I realised the auth_token issue didn't affect master.

Regarding the breaking API change, note that the SQL backend in stable/grizzly has always only stored the md5 checksum in the token id:

So in Grizzly just switching backends also changes the content of the revocation list.