Fix tests
Add test for no access after deleting token