verify token on deletion