implement token-user-validation for tickets #128