security for create token and start some unit tests