KAZOO-2116: api to validate auth_token