token validation method changed