always check token validity by a HEAD request for account metadata; add removeAllFiles method