TokenIssuer implementation + UTs