added missing parameter for token_type
changed unallow to disallow