moving fetch tokens code to the OAuthManager