simple-secrets token handler for cowboy-resource-owner