added token verification helpers
added .cert to vcs