docs: public static final AuthToken createAuthToken(String principal, Set<String> roles, int expiresInMillis) {
          AuthToken token = new AuthToken();
          token.setIssuedOn(new Date());
          token.setExpiresOn(new Date(System.currentTimeMillis() + expiresInMillis));
          token.setPrincipal(principal);
          token.setRoles(roles);
          signAuthToken(token);
          return token;
      }