Added simple token verification prior to returning users