spot checking base64 datatoken