add tests for token roles #11