Add proper whitespace check
Rename isIllegal() to validateToken()