webservices will be validated by token only, update in fail2ban failregex and add new function validatetoken() in lib/fn_auth.php