add server side token verification