Don't you need to check the token's validity with the mint?