Small cleanups

- add get methods to Token and make data private
- use TokenPtr to reference a token