1. Token request procedure