Configuring session token invalidation

To activate session token invalidation, configure the blackduck-config.env file and set JWT_BLOCK_LIST_CHECK=true.