change access_token validation for performance