Add security token validation (still optional)