train-20
initial sketch of preVerifiedTokens
added a test for invalid preverifytoken, default config to no secret
WIP on public-key preVerifyTokens