added units tests for admin#invalidate_token and admin#do_authentication?