add validate token method to auth