Verify access token in callbacks controller