Validate session token with User.me2