Validate session token with User.me