Add config item for validation of token - turned off by default.