Moved the logic of whether to return the verification token via the API to config files