clearToken is now private