Query validation example: ensure that a token is valid for protected endpoints
Let hosts create their own web interface config