add tests
add SHA-256 to TokenStrategy