Move auth_token.rb to services and add test cases

Since auth_token is a service, put it into correct directory. Also, add some some configurable expiry.