[identity] Enforce maximum size on token cache

This places an upper bound on the size of the cache.
Evicts expired tokens on get/put operations, and evicts a random token
when needed to make room for another token.

Change-Id: I8a9eb2926ab134c3e756b1f6b152c56e5bd1a199