Add specs for refreshToken