added action filter attribute for token validation