java security core library (tokens and validators) without jakarta.servlet or Spring dependencies