Service Tokens are really a middleware specification

Move the specification for service tokens to the middleware
where it belongs.

Change-Id: I406d0168a3c4d3397d201382b8a8d4a4227aab7d