introduce tests for the /token endpoint; introduce tests for the AccessToken model