A bit more token validation.