[SMALL] We should be using 'default(CancellationToken)'

... rather than 'new CancellationToken()' throughout the product code. Fixed in a couple of places.