refactoring
saving null token when user declined authorization
refactoring: extracted business method