allow verifyAccount=false when applying tokens