Remove AuthManager

The authentication module should not care about the delivery of the
result to the client
Move TokenManager to the index module
Rename authentication module to access-token