check app token 2