removed auth token validation