test api access using cached api token