basic token auth testing successful