fix auth_is_valid?
Only check validity for tokens that exist