updated api authentication by token tests