I would consider switching the order of the sections 4. remote call and 5. capability tokens. It seems to me that the knowledge from the capability-token section is prerequisite for the remote-call exercise.
I don't feel confident enough yet to make a pull request myself because I'm not sure I would know all the places in which I would need to apply the changes.