Testing token enforcement