Better verification, and now also verifies tokens.
Run logging.basicConfig() as a default for naive applications.

Without a logger, important messages might get lost,
and newcomers might get very frustrated!