[security] add fund test for TokenFactory.