Don't require a session token for profile creds.