remove AbstractLogger ... not needed anymore
Abstract token now contains all the credential information of an authorized request
refactor user and client lookup
password is optional ... allows for more other authentication methods