They are just different ways of user authentication. How to implement access tokens depends on how you implement the `findIdentityByAccessToken()` method - you can use the same table (for simple case) or a separate table. I don't see why this has to do with separating them into two classes.