Don't set a new action token on check - this effectively makes it per-session.