specs for tokens_controller#get_token