add refresh token integration test