// simulate form post on dirty page
Map map = facesContext.getExternalContext().getRequestParameterMap();
map.put(id, value);
// simulate apply values
token.decode(facesContext);
assertEquals("value", value, token.getSubmittedValue());
// simulate validation and invalidates token
token.validate(facesContext);