The ApplicationToken and UserToken module in Whydah IAM/SSO