Offering param not required when using tokenUrl