expand a life time for token.
extract IndexAuthenticator as a service.