PASS: token round trip, signature tampering, malformed and expired tokens, missing secret.