VerificationService not checks tokenSignature