fetchToken method now private