Since `OneTimeTokenService` involves storing tokens, it is necessary to make the `DefaultOneTimeToken` serializable.