passing tokens now(not apikeys), passing tests