No longer use validate verb to check user session tokens.