afb-context & afb-token: rework token validation

No match.