Adding a functional test for anti forgery.

#333 
Can you change the comments to say what is actually being tested here? And where is a token come from here?