add tokeninfo file, add test to check whether or not you are able to access other users files