add basic and pending tests for refresh tokens