adding IDN support, fixing validateLfToken