OAuth2ResourceServerConfigurer -> ResourceServerSecurityConfigurer
Remove some features from JwtTokenStore

In particular it doesn't make sense for a JWT "store" to pretend
it can get an access token from an authentication (it will never
know whether there was a refresh token, or if the token had
been enhanced in various ways).