integration refactoring

Actually the TokenVerifier is doing the verification. 

You are missing the part that we are talking only about the implementation. The client code that wants to verify tokens will use the TokenVerifier interface.

In the context of the repository: repository.verify() // we are verifying that token is contained in the repository, which sounds reasonable to me.

More information can be taken from: http://objectmentor.com/resources/articles/srp.pdf
Point: "What is a Responsibility" and the diagram of this design is shown on Figure 9-3