add db operation and token check