added the token validation script