updated issue token to pass the raw token string to the callback, which is the only time the raw token string is exposed; added compareToken method and associated integration tests