Active auth tokens should be discarded on tenant deletion

[alessio-capello]

When a tenant is deleted by superadmin, active auth tokens should be disabled/discarded to avoid POST/PUT/GET on a no-more accessible tenant