added original token to the validateFunc, this is needed to add the token to the blacklist when logout