Move setter for AccessTokenConverter down in to JwtTokenEnhancer

The existence of 2 instances of AccessTokenConverter was problematic, and
one of them didn't have a setter. It made sense to merge the feature down
into the JWT token enhancer, keeping that class as an internal imlementation
detail but allowing customization.

Fixes gh-176