add token verification to various actions