POST /one-click/signups docs now state that you must always send ssn4 — birthDate is an optional addition on top of it for a stronger match, not a substitute. This is a required practice, not a backend validation change: the API itself still technically accepts a birthDate-only request, but partners should no longer rely on that.