When you use the token, no username is required