refactored validate() into validateClientAuthToken()