test TokenEndpoint