so this seems to working in the sense that revoking the session and them following up with a request that requires a valid session with give a 401 however i still don't see any info updated in the superTokens db