Use backend for sole token validation

[ppelayo1]

Not a huge priority, but the backend should be doing all the token validation as it returns error messages.
Be worth looking into getting rid of the verifyToken.js util function sometime.