return token instead of empty string

The ObtainRequestToken and ObtainAccessToken methods should return a token instead of an empty string.

The token variable was never set and the returned token was always empty.