sub-token recovery test service