1. Make it possible to reuse getIdForRequest() 2. Introduce a flag to control if oAuth2 bearer token should be base64 encoded 3. Promote resolve() to locate/validate access tokens by id