I would suggest an instance field for the token. BugzillaConnector has never made any thread-safety guarantees for a single instance, but multiple instances should be able to connect to different servers without stomping each other's tokens.