token verification commented