Token service priti

Implemented Basic Token Service.. Wrote Test cases for the same.
Further extensions can be done to set session timeout period and accordingly maintain sessions. But not sure whether session timeout period is responsibility of TokenService or Log In module...
Why is this method part of the token service?