The returned `Token` is an `Authenticated Token` because some roles are given to the `Token` unlike the one created in the `AuthenticationListener`.