do server login first then test RequireServerToken