more input validation of preVerifyToken with regex