ezidam: added logout page, added RefreshToken guard

crates/database/queries/refresh_tokens/get_one.sql

@@ -0,0 +1,14 @@
+select
+    -- info
+    token,
+    ip_address,
+    user,
+
+    -- timings
+    created_at as "created_at: DateTime<Utc>",
+    expires_at as "expires_at: DateTime<Utc>",
+    used_at    as "used_at: DateTime<Utc>",
+    revoked_at as "revoked_at: DateTime<Utc>"
+from refresh_tokens
+
+where token is (?)

crates/database/queries/refresh_tokens/revoke.sql

@@ -0,0 +1,5 @@
+update refresh_tokens
+
+set revoked_at = CURRENT_TIMESTAMP
+
+where token is ?