added a token-based validation service that uses SHA3