Not sure if `handle_delete_token_api_request` is used in other versions, so it's duplicated to be safe.