make cross check on access token