env dependent verify token