No longer use the validate verb to check user session tokens.