code: private void removeEntryFromAuthCache(HttpServletRequest req, HttpServletResponse res, WebAppSecurityConfig config) {
          /*
           * TODO: we need to optimize this method... if the authCacheService.remove() method
           * return true for successfully removed the entry in the authentication cache, then we
           * do not have to call the second method for token. See defect 66015
           */
          removeEntryFromAuthCacheForUser(req, res);
          removeEntryFromAuthCacheForToken(req, res, config);
      }
docs: Remove entries in the authentication cache
  
  @param req
  @param res
  @param config