calling checktoken even on first authenticication