You should check that the length of the token is appropriate.