You should probably have a test for `User#set_new_token`