testing token decrypt