Create token-validation.rst