removed redundant handling of unauthorized status code from validateAccessToken()