Token service

Please Review Token Service
Why do I need to pass the entire access token object to release or validate it?