Does this test do what I think it does? Validate a token first (pass) and then the same token with an invalid scope (fail)?