Isolate security services in their own project.
Rename TokenProvider to TokenService