bug fix - handling validate access token