Session token now isn't required