[stanleydrew]

Not sure if they do, but why not? It's just an opaque token in the HTTP request content, same as any other opaque token.