Get the current request or access token.
an OAuth2Proxy
the token, or null if there is no token yet. This string is owned by OAuth2Proxy and should not be freed.