Skip token auth on Sessions#create