update test to reflect that the token is now embedded in the user JSON