fix token retrieve, and add client convenience methods for new docs
add permissions example