add tests for oauth tokens