called api.validate token in DoToDo view controller