Pull token validation in requests earlier in the routing.
Avoid redundant validation.