testing token usage in IndieAuth 4.4