Description of problem:

User cannot invalidate self token without edit_users permission.

How reproducible:

Always

Is this issue a regression from an earlier version:

No

Steps to Reproduce:

1. Create a non-admin user without any permissions to it and create a token. 

2. Try invalidating self token of the user using API endpoint. 

3.

Actual behavior:
[

{   "error": \{"message":"Access denied","details":"Missing one of the required permissions: edit_users","missing_permissions":["edit_users"]}

}
]

Expected behavior:
[User can invalidate self token without edit_users permission]

Business Impact / Additional info: