add spec for tokenverifier