don't require this information now for unauthed tokenization