check server's token