changed validate token to validate oauth2 access tokens instead of keystone tokens