Add test for user token removal