Test for rejecting second usage of the same authorization code