test coverage for exhanging, issuing and refreshing access tokens