Token validation with HEAD may include a set of project ids.

Change-Id: I03c8ffee047e69a930db6b6b1c739b3e8d825fa3