anvil.verify middleware validates access token claims