token renewal: baby steps
more baby steps