Completely revamp TokenListener as OAuth2 specific.