IMO, the token should become mandatory as we can't use the REST API without a token. I have make it optional in my first implementation as OAuth was directly part of the lib which is not the case anymore. Additionally, the PHPDoc & human doc should be updated accordingly.