token verification added