Add check token endpoint, fix patch user