Validate tokens locally