validate access token to avoid confused deputy problem