router.post("/api/plugin/update-token")
nothing calls this directly
no outgoing calls
no test coverage detected