wrong method call in verify_token()