pub async fn verify_access_token(
    token: &str,
    user_id: UserId,
    db: &Arc<Database>
) -> Result<bool>