api_token is not required anymore