Supports validating access tokens like an api