Allow TokenExtractor to be injected in ResourceServerSecurityConfigurer

Fixes gh-309