update_token method is no longer private