Currently it returns the raw response from the api which is a pain to dissect.
Ideally it should return the token itself or false

It also has 3 arguments that are in a confusing order - callback before endpoint. We should rethink this - possibly using a deferred object.

Version: unspecified
Severity: normal