Web client has token passed to it when the confirm and refresh token methods are called.