Extract Token to own file and autoload it.
Upgrade AS to 4.2 and use bundled secure_compare.
Specify random test order.