AccessToken.verify method