More access token validation tests