Clarify which parameters require token_auth