add test coverage for token endpoint changes