doc for getDelegationToken method