Validate and invalidate tokens