delete useless code + security

delete blocking param (true by default) + get_token as protected
function (at least ^^)