[security] use GenericTokenFactoryInterface in all examples.