code: func (m *Manager) RemoveOrganizationScopes(globalID string, username string) error {
  	var accessTokens []AccessToken
  	qry := bson.M{"username": username}
  	err := m.getAccessTokenCollection().Find(qry).All(&accessTokens)
  	if err == mgo.ErrNotFound {
  		return nil
  	}
  	if err != nil {
  		return err
  	}
  	for _, accessToken := range accessTokens {
  		if !accessToken.IsExpired() {
  			memberOfScope := fmt.Sprintf("user:memberof:%s", globalID)
  			if strings.Contains(accessToken.Scope, memberOfScope) {
  				accessToken.Scope = removeScope(accessToken.Scope, memberOfScope)
  				err = m.getAccessTokenCollection().UpdateId(accessToken.ID, accessToken)
  				if err != nil && err != mgo.ErrNotFound {
  					return err
  				}
  			}
  		}
  	}
  	return nil
  }
docs: // RemoveOrganizationScopes removes all user:memberof:globalid scopes from all access tokens