token is no longer required to get a user's activities