I moved handlers to dedicated package.
I added publicly available token creation endpoint with 2 seconds rate limiter.