currently we get the token before every request - which is not optimal. We should only get the token when we need to.