What does a validation token look like?