partially implement token request