Remove code from copy/paste mistake.
Fix scope validation on refresh token grant.
Add initial refresh token grant tests. Fix #182.