Finished server-side token validation