back to (profile_id, application_id). I think we can get away without a DB change by only issuing one anonymous access token per user.
back to (profile_id, application_id). I think we can get away without a DB change by only issuing one anonymous access token per user.