validation are tokens driving me crazy