assert tokens are being returned