SecurityToken is enabled here, but never disabled.

in your `setUp()` function you should record whether SecurityToken::is_enabled(), and then in `tearDown()` you should use the result of that check to conditionally call either `SecurityToken::enable()` or `SecurityToken::disable()` to reset the state.