response bodies for token validation