Token-based flow control