Added check that authZ code has associated scopes
Added basic refresh token unit tests