Major Description
the current way of retrieving the configuration options for the TokenProvider still reflects the state when the token provider was part of the overall authentication configuration.
now that the token provider has it's own configuration setup that nested configuration parameters is no longer useful and could be simplified a lot.