added more tests for token validation