Should not validate token at every call

[adrianmo]

Currently the library validate the token by sending a HTTP request to token verification endpoint at every call, which is not necessary.