Language Design For Token Server Authentication Policies