Introduce TokenGetSeter so in the future we can read/write the token form a custom header or the request URI rather than just cookies