added issue and revoke token methods to user
added integration tests for issue/revoke token methods on user, since they are database-dependent
updated tests to use assert.instanceOf where relevant; improved descriptions