Attempts to validate an encoded token for expectedPlayerId.
Returns null when the token is absent or invalid.