test that token is issued upon valid authentication, test that token is not issued upon invalid authentication