Security Fix

[compatibility] consumer token is now REQUIRED for synchronous
DTConsumer requests