added a simple token manager which does not use ehcache