Add some tests for refreshing the user's token