@Test
public void blowsUpWhenTokenMatchesNoUser() {

  when(tokenStore.parse(token)).thenThrow(new TokenException());
  try {
    authenticationService.validate(token);
    expectFailing(UnauthorizedAccessException.class);
  } catch (UnauthorizedAccessException e) {
    assertThat(e.getMessage()).isEqualTo("No user matches such a token " + token);
  }
}