[security] token factory should accept identificator.