added initial implementation of an access token validation end point