request token implementation