fixed the test in auth_token so it checks that user is signed in