Reads token by header, request or cookie
Adds client test