added invalid token test, throwsasync method
added unauthorized access test, added exception return for tests