Regexp property expectations always match against a string
Add refresh_token validation setting tent_expires_at
Add validation for expired authorization