Update token creation validation.

Allow for token to be created without a card ID. Useful in cases such as shared customers.