token validation added