Possible `NullReferenceException` here. We never guarded against `token` being null.