update validation of requestToken