AuthorizationToken management refactored

moved to separate AuthorizationToken::Manager and
AuthorizationToken::*Storage