Basic token check

+script will be made local access only in the future