PMMA-11 move token validation from assignData to authorize