Switched handlers from using getToken(username) to getToken(username,password)