random tokens need to be filled in before validation, otherwise the validation is just checking a blank value