Identity controller for issuing 'tokens'