Add validation on the incoming token

[manuelmauro]

Add validation on the incoming token, we are currently passing the raw user input straight into a query (thanks sqlx for protecting us from SQL injections <3);