check token onfly if user wants two step enabled