in src/main/java/org/apache/sling/auth/saml2/impl/TokenStore.java [161:167]
String encode(final long expires, final String userId)
throws IllegalStateException, UnsupportedEncodingException,
NoSuchAlgorithmException, InvalidKeyException {
int token = getActiveToken();
SecretKey key = currentTokens[token];
return encode(expires, userId, token, key);
}