Add comments to what the tests are doing.
Add test to invalidate token (logout) and test to authenticate token:
Using both header/query methods.