add the sinatra test for the shared readonly token