added more unit tests around token verification