Added token and surl validation for recall requests