API tokens can/should be broken out into API object, probably.