AuthServer have validate and invalidate interface.