Don't regenerate id_token on validations, unless the token is missing