added test for no expiration on access token