Also `$_['requesttoken']` is never set?