validate token validity, test to follow