getTokenRequest should be private.
Delete should not throw.