@Test
public void testAuthenticate_invalidToken() throws Exception {

  when(verifier.verify(TOKEN)).thenReturn(null);
  assertNull(authenticator.authenticate(request));
  assertNull(attr.get(Attribute.ID_TOKEN));
}