OK to hook up LED without resistor?
You do need a resistor in series with any bare LED to limit the current. (but there are some LEDs that include a current limiting circuit.)

Many inexpensive flashlights depend on the battery's internal resistance to limit the current - in that case, replacing the LED with one requiring much less current will likely destroy the smaller LED.