check userinfo and token