AS-334: Auth token delay

Having a delay before returning a fresh authentication token. This *could* reduce 401 errors since one of the possible reasons mentioned by Identity team was replication. 
I also thought of the integration tests but thought to start with simple test for now. Would it be OK to do it in another PR? They might be many test cases for integration. Part of me feel checking composition is enough, part of me feels integration tests are necessary.