new function to validate access token request