added test coverage for auth_tokens