token
process validate session request