dev: minor fix, only check token when survey is not anonymous