when token is valid