Validation of token/uid combined