Yes you always need to send a token. If you are using

serve-testing

, it can be anything.