test that token is issued upon valid authentication, test that token is ...

...not issued upon invalid authentication