I don't like at all validateToken...

Signed-off-by: emanuele <emanuele45@gmail.com>