Update TODO.md
Update TODO.md

revoking tokens for servers is done, revoking tokens for players (as admins or as players) is not.
duckpunch/online-ratings,Kashomon/online-ratings,usgo/online-ratings,usgo/online-ratings,Kashomon/online-ratings,duckpunch/online-ratings,usgo/online-ratings,Kashomon/online-ratings