decktutorsdk version 1.0

mark this method as private, `_validate_token_hash`