Token verification tests are passing