added auth/isValid?&token=sometoken