Hi,

If those tokens are not actually checked, the validation can be relaxed.

Thinking about the backport, are tokens checked in 6.1.20? 

Alberto