Added description to ws-security.validate.token=false configuration