Token must be provided.