check valid access token before executing service