add token verification