Feature: reusable setting for token authenticatable strategy

You may now configure if an authenticatable token can be reused (in which case you take control over when to change and invalidate it) or to not be reusable at all, hence they are destroyed once they are consumed.