Check we raise SuspiciousOperation if the token has been tampered with