scope check in checkToken