add tests for invalid tokens