Thus create a failcase to check that the client calls the token endpoint with invalid s_hash

Implement a runinbackground() call so that the test suite passes.

Closes #416 (closed)