Simple validation of valid token/user