- test authenticate with token only
- test validate token