add spec for tokenverifier

sorry, forgot to commit in previous pull request #3