test coverage for oidc token middleware