+ added controller for checking for validity of a token