added test for has_token without access_token.