make tests use token, not api_key
regenerate test data using tokens