Still trying to untangle PasswordToken() and the return values.