always check token except activation, adding token by username/password rest method
fixing rest token function name
fixing full cycle test