Revamp AccessTokenServiceProvider as AccessTokenControllerProvider with good test cases.