removed token validation, did not work how I thought