lots of nice test coverage for generateToken #12