ensure the access token is valid for a given patient id