don't require questions when authenticating via authentication token