Add test for no refresh token