I might need to RTFM regarding the zedtoken - I glossed over it thinking it was related to the shared secret / auth