What is a validation token?