Implements acces_token validation, defualt=DISABLE