Would it work if I simply added SecurityToken::disable() to the end of each test? After it had been enabled?