rework token service. rename to manager.